Okay, found more correct workaround, this time without required
ignoration of gpg signatures.
Just use:
(sudo) dnf --disablerepo rawhide --enablerepo updates \
upgrade fedora-gpg-keys
(sudo) ln -s /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-34-{primary,$(arch)}
(sudo) dnf --repo rawhide --releasever 34 upgrade \
fedora-gpg-keys fedora-repos fedora-repos-rawhide
Then just
(sudo) dnf upgrade
Correct key made it into updates, but no architecture symlinks were
provided.
On 8/25/20 11:40 AM, Petr Menšík wrote:
> Hi Vít,
>
> Unfortunately your workaround does not on my rawhide container. I think
> the problem is in missing gpg keys from fedora-gpg-keys, which do not
> contain also architecture specific keys.
>
> # rpm -q fedora-repos fedora-repos-rawhide fedora-gpg-keys
> fedora-repos-33-0.9.noarch
> fedora-repos-rawhide-33-0.9.noarch
> fedora-gpg-keys-33-0.9.noarch
>
> # sudo dnf -y --enablerepo=updates --enablerepo=rawhide update
> fedora-gpg-keys
> Last metadata expiration check: 0:54:22 ago on Tue Aug 25 10:24:53 2020.
> Dependencies resolved.
> =====================================================================================================================================
> Package Architecture
> Version Repository Size
> =====================================================================================================================================
> Upgrading:
> fedora-gpg-keys noarch
> 34-0.2 rawhide 105 k
>
> Transaction Summary
> =====================================================================================================================================
> Upgrade 1 Package
>
> Total size: 105 k
> Downloading Packages:
> [SKIPPED] fedora-gpg-keys-34-0.2.noarch.rpm: Already downloaded
>
> warning:
> /var/cache/dnf/rawhide-2d95c80a1fa0a67d/packages/fedora-gpg-keys-34-0.2.noarch.rpm:
> Header V4 RSA/SHA256 Signature, key ID 45719a39: NOKEY
> Fedora - Rawhide - Developmental packages for the next Fedora release
> 1.6 MB/s | 1.6 kB 00:00
> GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-33-x86_64
> (0x9570FF31) is already installed
> The GPG keys listed for the "Fedora - Rawhide - Developmental packages
> for the next Fedora release" repository are already installed but they
> are not correct for this package.
> Check that the correct key URLs are configured for this repository..
> Failing package is: fedora-gpg-keys-34-0.2.noarch
> GPG Keys are configured as:
> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-33-x86_64
> The downloaded packages were saved in cache until the next successful
> transaction.
> You can remove cached packages by executing 'dnf clean packages'.
> Error: GPG check FAILED
>
> I have complained two release before and this is still the same. It
> always break on new release. The only option now is to install it by
> hand from koji, where it is not yet signed (yuck!)
>
> # dnf install
> https://kojipkgs.fedoraproject.org//packages/fedora-repos/34/0.2/noarch/fedora-gpg-keys-34-0.2.noarch.rpm
>
> Then your commands would work, followed by normal upgrade.
>
> Filled bug #1872248 for it. It should finally work without user even
> fiddling with gpg keys manually. Is there some pressure to keep users
> from using rawhide?
>
> 1. https://bugzilla.redhat.com/show_bug.cgi?id=1872248
>
> On 8/17/20 1:42 PM, Vít Ondruch wrote:
>> Just as a reminder to all Rawhide users, this is the easiest way to keep
>> using Rawhide after branching:
>>
>>
>> ~~~
>>
>> $ sudo dnf update fedora-gpg-keys
>>
>> $ sudo dnf update fedora-repos --release 34
>>
>> ~~~
>>
>>
>> Unfortunately, there has been no progress on [1] during past months.
>>
>>
>>
>> Vít
>>
>>
>>
>> [1] https://pagure.io/releng/issue/7445
--
Petr Menšík
Software Engineer
Red Hat, http://www.redhat.com/
email: pemensik@xxxxxxxxxx
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
